Outt
Sett
Behavioral task
behavioral1
Sample
766de86987282a317abf002533bad0f1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
766de86987282a317abf002533bad0f1_JaffaCakes118
Size
68KB
MD5
766de86987282a317abf002533bad0f1
SHA1
b787a2c589f9380ee39a05bd4729fb0ac8ed1295
SHA256
1ae59875e447e0f7c8e7136ac31b34e1bf1a1c37fd5560fa51836dcc19870aae
SHA512
b4ebe2ae91fb616079a303f61a762beb464da969276800a752ad0fdd4325d678e4a972c54c73aa6d347150de8130045a1d0b335d4168e95b5d93622008d3f80c
SSDEEP
1536:EGUq4odB52DNwMb/7hrilO10L7IH7mFGdAfUuEI7r92yfMn:EGfNdB5ONvb/s7Ib0Gd1udAYMn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
766de86987282a317abf002533bad0f1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ